Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Weekly automatic Report for specific rules id #819

Closed
lucio2047 opened this issue Jan 11, 2021 · 1 comment
Closed

Weekly automatic Report for specific rules id #819

lucio2047 opened this issue Jan 11, 2021 · 1 comment
Assignees
@jnasselle
Labels
community

Comments

@lucio2047
Copy link

Hi everyone.

I have a doubt. I need to generate a weekly report when rules id 60109,60111,60110,60141,60142,60144,60145 appear in my environment (users management). I read one possibility is to configure the following section inside ossec.conf:

60109,60111,60110,60141,60142,60144,60145 <title>ABM de usuarios</title> xxxx@xxxx.com yes

But I would like to know if it's possible to generate this report by Kibana from GUI. If I configure by ossec.conf there is no possibility to indicate a period of time.

Thank you in advance.
@jnasselle jnasselle self-assigned this Jan 12, 2021
@jnasselle
Copy link
Member

HI @lucio2047 !

Unfortunately automatic email reports generated by Wazuh are only on daily basis. Currently there's an issue wazuh/wazuh-dashboard-plugins#1492 to enhance this mechanism and make it posible.

You can follow the progress of the issue there.

Regards,
Nico

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jnasselle jnasselle

Labels
community
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@jnasselle @lucio2047